$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json) Hash identifier: oArQB79No8Bw0F/9i06ZNY+N6W4kZCpQPxCc+uV7Zeo= Subject key identifier: 87:F8:A7:C9:33:21:11:3A:CF:BE:82:80:C2:2A:1D:6F:F3:C4:9F:AB Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Certificate serial: 0F31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft Manifest number: 17B6 Signing time: Fri 16 May 2025 17:52:32 +0000 Manifest this update: Fri 16 May 2025 17:52:31 +0000 Manifest next update: Fri 23 May 2025 17:52:31 +0000 Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: xck6oHgibRVbL+72YY7GjTWg0bdA024I96QRrgAGP3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Validity Not Before: May 16 17:52:31 2025 GMT Not After : May 23 17:52:31 2025 GMT Subject: CN=68277b5f-7dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4d:41:ec:ce:f0:19:e6:3a:5a:3a:d2:47:6a: 4a:e0:07:8b:09:39:fd:9f:62:f6:af:b2:a7:63:8c: 2e:09:31:eb:47:7d:33:b8:31:b9:71:f0:03:b6:47: 8b:3f:ba:b0:15:52:ab:fb:30:98:1e:17:44:2e:b5: da:93:a3:ff:c7:f2:84:27:42:69:63:43:19:32:73: cb:07:4e:29:29:65:0f:ef:b1:c1:54:80:7b:fc:48: 46:5a:48:aa:f5:d3:03:c6:9b:d2:23:7c:66:8c:d8: a7:68:a6:c8:70:86:2f:fd:09:82:35:82:27:62:72: 83:43:36:10:05:b4:f9:df:42:e6:15:da:df:40:ab: c1:78:36:cb:ca:50:fe:8f:99:7b:81:38:5c:41:c1: eb:8c:a5:62:b0:d7:46:44:1e:aa:a8:8b:47:d5:6e: 15:b8:e1:64:ee:8a:56:ab:09:64:f2:df:24:90:62: d4:ba:34:21:a7:52:62:40:86:28:11:fc:13:50:d5: 97:63:de:f9:ff:5c:da:b0:d6:db:48:45:67:b2:d1: cb:0d:f4:36:57:c9:ce:89:5d:2e:c5:c8:5a:a9:b4: 4b:20:48:9e:dc:99:69:b4:23:2e:2e:57:3f:70:02: 4a:49:08:7b:6d:6b:d3:93:b2:0b:8d:e1:5c:81:30: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:A7:C9:33:21:11:3A:CF:BE:82:80:C2:2A:1D:6F:F3:C4:9F:AB X509v3 Authority Key Identifier: keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b6:a8:f9:23:60:af:21:dc:1f:1f:86:14:aa:ee:ea:3d:04: 61:01:e5:5b:89:66:73:01:8d:8c:14:4a:d9:80:c4:46:27:64: 8c:ed:dd:2f:d4:e2:fd:cc:b9:28:17:86:ec:b5:42:e7:94:47: a0:6b:b3:22:0c:61:16:d8:b7:67:9f:0d:58:a2:ff:db:4c:04: fa:74:bc:3d:55:dc:ce:f1:3c:3b:86:a5:51:99:e8:c0:cc:38: e5:db:f2:77:e3:37:71:90:5e:e9:a7:d8:ae:13:3f:69:5f:c6: 80:7d:bb:db:89:8a:d3:6b:2e:b0:f9:7e:c2:76:65:bc:2c:72: 14:16:ff:bd:67:24:d2:ff:49:2d:1c:29:48:af:03:92:ed:9a: 21:20:52:c3:c7:b8:d3:fd:d5:f8:7f:7b:3f:ba:62:94:e4:c7: 52:01:04:c1:a1:5f:f2:f7:f7:6d:80:7f:02:e5:66:57:4e:b9: 48:d5:a0:46:f8:d6:ee:0b:15:9d:aa:09:8a:4b:12:2a:09:dc: e9:63:68:df:ef:22:b1:bf:50:67:16:65:c3:a0:4a:1d:9a:22: 30:69:29:e0:78:ca:8c:1f:6e:24:6a:5f:c8:d5:6a:0a:c8:c2: 62:19:5e:17:27:44:cd:8c:c7:07:fe:4c:68:86:2c:33:56:57: 11:aa:6a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4 NDhFRkJFMDQwHhcNMjUwNTE2MTc1MjMxWhcNMjUwNTIzMTc1MjMxWjAYMRYwFAYD VQQDEw02ODI3N2I1Zi03ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9k1B7M7wGeY6WjrSR2pK4AeLCTn9n2L2r7KnY4wuCTHrR30zuDG5cfADtkeL P7qwFVKr+zCYHhdELrXak6P/x/KEJ0JpY0MZMnPLB04pKWUP77HBVIB7/EhGWkiq 9dMDxpvSI3xmjNinaKbIcIYv/QmCNYInYnKDQzYQBbT530LmFdrfQKvBeDbLylD+ j5l7gThcQcHrjKVisNdGRB6qqItH1W4VuOFk7opWqwlk8t8kkGLUujQhp1JiQIYo EfwTUNWXY975/1zasNbbSEVnstHLDfQ2V8nOiV0uxchaqbRLIEie3JlptCMuLlc/ cAJKSQh7bWvTk7ILjeFcgTAJvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf4p8kz IRE6z76CgMIqHW/zxJ+rMB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2 Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0 eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAitqj5I2CvIdwfH4YUqu7qPQRhAeVbiWZzAY2MFErZgMRGJ2SM7d0v 1OL9zLkoF4bstULnlEega7MiDGEW2Ldnnw1Yov/bTAT6dLw9VdzO8Tw7hqVRmejA zDjl2/J34zdxkF7pp9iuEz9pX8aAfbvbiYrTay6w+X7CdmW8LHIUFv+9ZyTS/0kt HClIrwOS7ZohIFLDx7jT/dX4f3s/umKU5MdSAQTBoV/y9/dtgH8C5WZXTrlI1aBG +NbuCxWdqgmKSxIqCdzpY2jf7yKxv1BnFmXDoEodmiIwaSngeMqMH24kal/I1WoK yMJiGV4XJ0TNjMcH/kxohiwzVlcRqmoL -----END CERTIFICATE-----Generated at Sat May 17 03:36:24 2025 by rpki-client